Nikos Mavrogiannopoulos n.mavrogiannopoulos@gmail.com writes:
It seems you're correct, sorry for the noise. I interpreted the _digest() functions of nettle similarly to digest output functions in gcrypt which don't cause a reset of the hash.
So in nettle, instead you need to copy the state (or start over) if you want to have the digest of X_0 and the digest of the concatenation X_0 + X_1. Which I'd expect to be a less common use case.
Regards, /Niels